crypto

package

v1.0.6 Latest Latest Go to latest Published: Sep 13, 2015 License: Apache-2.0 Imports: 24 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

func CertsFromPEM(pemCerts []byte) ([]*x509.Certificate, error)

func IPAddressesDNSNames(hosts []string) ([]net.IP, []string)

func NewKeyPair() (crypto.PublicKey, crypto.PrivateKey, error)

type CA struct {
	SerialFile string
	Config     *TLSCertificateConfig

	Serial int64
	// contains filtered or unexported fields
}

func EnsureCA(certFile, keyFile, serialFile, name string) (*CA, bool, error)

EnsureCA returns a CA, whether it was created (as opposed to pre-existing), and any error

func GetCA(certFile, keyFile, serialFile string) (*CA, error)

func MakeCA(certFile, keyFile, serialFile, name string) (*CA, error)

func (ca *CA) EnsureClientCertificate(certFile, keyFile string, u user.Info) (*TLSCertificateConfig, bool, error)

func (ca *CA) EnsureServerCert(certFile, keyFile string, hostnames util.StringSet) (*TLSCertificateConfig, bool, error)

func (ca *CA) MakeClientCertificate(certFile, keyFile string, u user.Info) (*TLSCertificateConfig, error)

func (ca *CA) MakeServerCert(certFile, keyFile string, hostnames util.StringSet) (*TLSCertificateConfig, error)

type TLSCARoots struct {
	Roots []*x509.Certificate
}

func GetTLSCARoots(caFile string) (*TLSCARoots, error)

type TLSCertificateConfig struct {
	Certs []*x509.Certificate
	Key   crypto.PrivateKey
}

func GetServerCert(certFile, keyFile string, hostnames util.StringSet) (*TLSCertificateConfig, error)

func GetTLSCertificateConfig(certFile, keyFile string) (*TLSCertificateConfig, error)